More and more organisations are outsourcing transcription, whether that’s verbatim, intelligent verbatim, note taking, summaries or language services. But for investigative interviews, there’s a catch.
Interviews like this can be sensitive, dealing with confidential or contentious issues. And new GDPR rules mean you need to take even more care when capturing, moving, and storing data. The reputational risks are considerable if something goes wrong.
So how do you make sure your information is safe when you’re not in control of your external partner’s data management systems and processes?
Among the quality standards dealing specifically with cyber security, two are worth looking out for. Whilst some charter marks and accreditation schemes are just about “box ticking”, ISO270001 and CyberEssentials are different.
ISO27001 is an internationally recognised standard for handling data. It covers strategy, policy and procedures across all the legal, physical and technical aspects of an organisation’s information management. Appen has been accredited to ISO27001 since 2012.
To qualify, an organisation must:
- Identify IT risks
- Assess the implications of those risks
- Put in place systems to limit the potential damage
- Are our firewalls secure and fit for purpose?
- Are our security settings the right ones?
- Who can access what data?
- Is our malware and virus protection adequate?
- What arrangements are there for keeping devices/software up to date?
